This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/BZFZuFXC71TwL2ElhyH26nE5ocg.roa
File:                     BZFZuFXC71TwL2ElhyH26nE5ocg.roa (raw, json)
Hash identifier:          vaIAKgMKWXJsoZlSOyf2fzlB5OXH5//ZgWFoonl3uHc=
Subject key identifier:   05:91:59:B8:55:C2:EF:54:F0:2F:61:25:87:21:F6:EA:71:39:A1:C8
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       061B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/BZFZuFXC71TwL2ElhyH26nE5ocg.roa
Signing time:             Thu 01 Jan 2026 01:50:00 +0000
ROA not before:           Thu 01 Jan 2026 01:50:00 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     10010
IP address blocks:        210.4.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1563 (0x61b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan  1 01:50:00 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=059159B855C2EF54F02F61258721F6EA7139A1C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3b:66:57:ff:0c:41:7c:7f:48:76:1f:63:c0:
                    b8:aa:68:f6:46:f9:a4:46:60:9a:9c:05:46:1b:62:
                    00:0c:f2:06:ae:96:d6:6d:08:11:37:73:47:14:11:
                    9c:f9:bc:e1:bf:ff:60:55:7e:f4:fa:2f:75:55:1b:
                    5a:9d:29:8a:da:07:aa:58:47:e9:a8:00:8b:2f:8f:
                    07:9d:72:2a:b2:6b:73:fb:21:74:71:1f:32:dc:aa:
                    ef:4e:e2:dc:60:f2:61:62:c8:2b:e3:6f:ab:ce:6f:
                    a0:09:2a:6d:99:b6:7b:fd:81:bc:11:5f:22:f5:a5:
                    97:91:c7:1f:62:76:de:c5:18:b6:0d:eb:39:09:c2:
                    8f:a2:30:b6:68:f9:17:6d:d1:46:62:e3:a5:8f:24:
                    a7:ff:13:c0:86:77:78:89:6e:a5:a6:43:01:ab:1b:
                    fa:58:17:d2:fd:93:49:14:3f:3c:26:51:dc:54:ca:
                    63:aa:fe:e2:c7:27:36:15:77:28:29:17:2f:5b:96:
                    4b:75:bb:c8:f9:2d:67:65:9e:9d:aa:73:60:7a:95:
                    1f:96:dd:33:e8:9c:08:c6:ed:2b:91:53:6a:dd:86:
                    e6:fd:94:7c:22:33:8d:d1:c7:6b:9e:95:39:b6:2b:
                    f6:fb:ee:69:6b:2f:86:f2:bf:dd:37:f6:80:55:23:
                    10:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:91:59:B8:55:C2:EF:54:F0:2F:61:25:87:21:F6:EA:71:39:A1:C8
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/BZFZuFXC71TwL2ElhyH26nE5ocg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.4.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:00:51:8a:e4:09:0b:d7:a9:60:49:25:f6:b3:b0:1e:8a:d1:
         8d:3a:87:27:c2:a9:20:2a:6f:96:07:a6:97:24:f5:df:70:ab:
         b2:ee:f5:a8:8c:2a:a9:23:bf:5b:e3:ce:29:da:01:db:2b:f6:
         05:9c:01:c7:c1:fb:2e:f1:68:72:26:10:0c:4a:8f:8f:17:b4:
         a9:27:43:11:6a:8a:49:44:4e:f6:78:05:58:84:b4:d5:6b:7b:
         1e:2f:7f:82:67:3b:e1:cd:9c:3f:fc:92:89:10:1e:4b:b8:11:
         0f:2e:08:3f:35:77:18:8c:1b:a5:dc:93:b1:ef:06:70:a0:4c:
         7c:3d:36:84:b8:24:63:ac:ad:22:71:70:19:b1:53:92:69:44:
         de:d7:c9:0b:0b:81:b4:b7:64:27:b7:31:c1:cd:91:3f:0b:41:
         3c:09:99:80:5f:3a:76:73:8c:7d:60:d8:c9:bf:b1:a3:c3:a4:
         ba:25:dd:8d:92:8a:5f:50:04:85:fb:17:1a:23:42:7b:84:9c:
         f3:28:ec:4b:9e:36:a0:52:e1:c9:dd:72:f2:e6:68:3f:dd:f0:
         ee:a3:b2:9f:b1:d5:77:49:ea:1b:6b:bb:6d:8b:a9:e9:7d:d9:
         06:46:65:c2:a4:ac:46:db:e6:ca:ba:a8:c3:90:e5:fd:09:ce:
         10:94:44:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:38 2026 by rpki-client